[isalist] Re: ISA server problem - connection refused.

  • From: "Stuart Tonge" <stuart.tonge@xxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 19 Apr 2006 16:07:06 +0100

Yeah I found a reference to Winsock earlier, there's not that much info
on this one though on the ms site.

I will sniff the traffic. If I do see RST's - then where do I go from
there?

 

 

________________________________

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: 19 April 2006 16:02
To: isalist@xxxxxxxxxxxxx; isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA server problem - connection refused.

 

10061 is a Winsock error tht ISA has no control of whatsoever.

It's generated by Winsock (not ISA) when the upstream host actively
refuses the connection (sends a RST).

The only way to show that this is actually happening is to gather a
packat capture while you try to repro the behavior.

 

________________________________

From: isalist-bounce@xxxxxxxxxxxxx on behalf of Stuart Tonge
Sent: Wed 4/19/2006 4:24 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] ISA server problem - connection refused.

Hi all.

 

I have an ISA server 2004 box deployed as a web proxy.

I have set an allow any-any rule to stop the firewall interfering.

I have my users proxying through this box to the web.

 

It works 95% of the time. The rest of the time, i get a 10061 connection
refused error.

If i refresh the page, it generally refreshes the first time.

This happens on many sites & has been seen nmultiple times on
microsoft.com, bbc.co.uk, isaserver.org.

Sometimes images do not load on a page, but this is fairly rare, and
some of the images may load.

Some will load, some will not.

 

I have tried to isolate 'problem sites' but this has not worked - the
error seems totally random.

 

The only common occurance I have noted is that after one error, some
clients - not all - seem to have trouble

connecting to any site for the next 30-60 seconds, instead receiving the
error over and over.

I have only seen this on 2 of 40 clients.

 

I have tried disabling all web filter add-ins, caching, ip routing, ip
filtering, etc.

Basically i've tried every button i can find in ISA 2004! nothing makes
the problem better.

It's also hard to test since it's intermittent.

 

The ISA server is directly connected to a firewall which filters
traffic, but this device works fine 100% of the time when

web traffic passed via it instead of ISA.

ISA is reporting no errors in the console. There are no errors in the
syslogs.

 

Does anyone have any ideas short of uninstalling ISA & getting a refund?

 

 

 

Thanks,

Stuart Tonge

 

Pink Fish I.T. LTD

Network Architect

stuart.tonge@xxxxxxxxxxxx

http://www.pink-fish.tv

01302 365408

 

All mail to and from this domain is GFI-scanned.

Other related posts: